Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Y4P-6J1hh6uRk_muBu_q3vpu2Eo.roa
File: Y4P-6J1hh6uRk_muBu_q3vpu2Eo.roa (raw, json)
Hash identifier: XODAzfRohS2CrdB5ymtW1UQbPLryLysdMIVNlXvILXQ=
Subject key identifier: 63:83:FE:E8:9D:61:87:AB:91:93:F9:AE:06:EF:EA:DE:FA:6E:D8:4A
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019FF03A779F887B7B05854951DE3C8B34A8
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Y4P-6J1hh6uRk_muBu_q3vpu2Eo.roa
Signing time: Tue 11 Aug 2026 09:49:51 +0000
ROA not before: Tue 11 Aug 2026 09:49:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:3a:77:9f:88:7b:7b:05:85:49:51:de:3c:8b:34:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 11 09:49:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6383fee89d6187ab9193f9ae06efeadefa6ed84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:95:3d:d8:71:c1:a6:73:a1:a1:2a:18:1e:61:
e6:4c:39:ec:af:41:94:f5:ef:38:a2:5e:7f:66:8b:
4d:0c:cc:c7:1b:19:d1:fd:cb:66:f5:06:b4:be:95:
09:ca:da:35:51:45:c5:78:38:39:e1:f1:b6:ce:22:
ad:e9:47:cf:30:9f:38:c4:f3:10:42:84:4f:8d:da:
1c:1f:8a:1e:d8:15:2c:62:32:4a:ac:d2:db:7c:af:
83:cb:0f:fd:be:89:b5:f6:95:c8:0a:a0:25:9f:ef:
29:be:6b:3b:7d:ee:1e:42:8a:07:fd:08:78:d9:7e:
fa:2a:70:dc:47:85:e5:02:d8:26:22:97:05:8d:b8:
04:06:e0:75:6d:8a:6c:b4:1a:a3:38:89:52:a3:02:
c0:1f:e2:6f:1e:e2:65:2a:06:bd:93:aa:11:45:64:
51:da:8e:2c:27:d4:77:c7:0f:1c:86:3d:1a:85:8d:
48:4a:af:06:74:01:a1:67:85:49:fe:eb:df:71:fc:
8b:a8:44:78:65:03:77:7f:ba:a7:f4:dc:27:ca:7d:
09:2a:59:5e:ed:d0:58:0f:e1:17:a7:2d:23:9d:8d:
0e:34:03:61:8e:0c:04:83:98:c0:67:d5:eb:a3:f7:
db:b0:56:62:0b:79:bb:1d:50:4a:ce:57:be:0c:e6:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:83:FE:E8:9D:61:87:AB:91:93:F9:AE:06:EF:EA:DE:FA:6E:D8:4A
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Y4P-6J1hh6uRk_muBu_q3vpu2Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.174.0/24
62.72.176.0/24
62.72.180.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:99:d1:a0:d0:55:93:f9:42:d6:22:78:40:b2:2e:d0:51:6e:
b4:30:93:3a:b6:ba:d6:b5:2b:cd:f0:0b:57:06:85:85:72:1b:
54:30:4c:ea:13:e3:15:aa:69:a2:98:81:f9:f7:36:90:48:fa:
d6:8b:45:04:f9:12:88:8c:87:1d:92:85:69:77:ca:33:a1:42:
7b:af:7c:24:ba:9e:f6:f2:27:4e:ae:12:8f:1f:db:14:5d:f2:
b1:ae:de:bd:d0:7c:b7:af:13:a6:0d:40:42:4c:31:e8:73:85:
1c:54:ec:b1:96:83:36:7c:22:c0:0d:68:e6:b2:08:3e:5d:53:
9b:52:d4:32:12:e1:b8:ea:c9:4b:1a:8f:76:db:e8:97:25:d0:
e7:8a:08:9b:45:79:7e:58:47:42:64:95:52:97:32:82:00:4c:
f4:92:4d:5b:fc:ff:61:25:48:0f:5a:60:a2:60:7f:fc:33:b7:
e2:1e:8f:b2:5d:be:72:81:da:33:81:86:4b:b9:03:5c:5a:2c:
d2:b5:52:ed:68:e4:39:07:f2:ef:ef:b8:d6:36:0b:ce:3d:82:
20:58:1e:7f:1d:74:b1:73:10:9e:3d:98:97:db:5a:a1:03:ac:
4f:15:ed:e7:72:00:6c:1a:9d:b4:c5:21:ad:40:07:a8:37:ea:
79:6c:11:2d
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ/wOnefiHt7BYVJUd48izSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYwODExMDk0OTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzgzZmVlODlkNjE4N2FiOTE5M2Y5YWUwNmVmZWFkZWZhNmVkODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pU92HHBpnOhoSoYHmHmTDnsr0GU
9e84ol5/ZotNDMzHGxnR/ctm9Qa0vpUJyto1UUXFeDg54fG2ziKt6UfPMJ84xPMQ
QoRPjdocH4oe2BUsYjJKrNLbfK+Dyw/9vom19pXICqAln+8pvms7fe4eQooH/Qh4
2X76KnDcR4XlAtgmIpcFjbgEBuB1bYpstBqjOIlSowLAH+JvHuJlKga9k6oRRWRR
2o4sJ9R3xw8chj0ahY1ISq8GdAGhZ4VJ/uvfcfyLqER4ZQN3f7qn9Nwnyn0JKlle
7dBYD+EXpy0jnY0ONANhjgwEg5jAZ9Xro/fbsFZiC3m7HVBKzle+DOb8MQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGOD/uidYYerkZP5rgbv6t76bthKMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvWTRQLTZKMWhoNnVSa19tdUJ1X3EzdnB1MkVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAE+SKID
BAA+SKgDBAA+SK4DBAA+SLADBAA+SLQDBACwOT8wDQYJKoZIhvcNAQELBQADggEB
AJyZ0aDQVZP5QtYieECyLtBRbrQwkzq2uta1K83wC1cGhYVyG1QwTOoT4xWqaaKY
gfn3NpBI+taLRQT5EoiMhx2ShWl3yjOhQnuvfCS6nvbyJ06uEo8f2xRd8rGu3r3Q
fLevE6YNQEJMMehzhRxU7LGWgzZ8IsANaOayCD5dU5tS1DIS4bjqyUsaj3bb6Jcl
0OeKCJtFeX5YR0JklVKXMoIATPSSTVv8/2ElSA9aYKJgf/wzt+Iej7JdvnKB2jOB
hku5A1xaLNK1Uu1o5DkH8u/vuNY2C849giBYHn8ddLFzEJ49mJfbWqEDrE8V7edy
AGwanbTFIa1AB6g36nlsES0=
-----END CERTIFICATE-----
Generated at Wed Aug 12 09:56:36 2026 by rpki-client